I've run up against this in the past and wonder if there's a way to
change the Windows system fonts (as appears in msconfig/running) so
the small case "L" and the large case "i" are discernable.

-Phil-


On 4/1/09, Ray Parrish <[log in to unmask]> wrote:
> Hello,
>
> A quick search on lsass.exe yields a ton of links on Live Search, and
> Google, that indicate that lsasse.exe may be a virus, or trojan file
> that you need to get rid of. It seems to come with a variety of malware
> programs, one of which is a rouge pogram that professes to be an anti
> spyware application, which tries to scare you into buying itself, to get
> rid of the lsasse.exe infection it "finds" for you.
>
> Other variants of it evidently have other uses the malware authors are
> utilizing, according to the information on some of the pages I found
> with the searches.
>
> Here is a link to a page which will tell you how to get rid of lsass.exe. -
>
> <http://www.411-spyware.com/isass-exe>
>
> You will likely have to boot into Safe Mode to get rid of it, and it's
> companions which are certainly on your system as well.
>
> Here is a couple of quotes from differing pages which talk about a
> couple of the variants this file manifests itself with.
>> isass.exe is registered as the Optix.Pro virus which carries in it's
>> payload, the ability to disable firewalls and local security
>> protections, and a backdoor capability.
>  From another site comes this quote. You should note that it references
> a legitimate system process named lsass.exe which you should not be
> removing, as it provides the user authentication process service on your
> operating system.
>> If a process named isass.exe is running on your computer, you may have
>> been infected with a strain of the Futro Trojan. Please be warned not
>> to confuse this with the legimate system process 'lsass'.
> Here is a quote from a page that talks about lsass.exe
>> The process lsass.exe serves as the Local Security Authentication
>> Server by Microsoft, Inc. It is responsible for the enforcement of the
>> security policy within the operating system. This process checks
>> whether a user’s supplied identification is valid or not whenever he
>> or she tries to access the computer system.
> Here is a link to the Wikipedia article on lsass.exe
>
> <http://en.wikipedia.org/wiki/LSASS>
>
> And the following link to an article by "Ask Leo", shows you how to fix
> the error you are experiencing with lsass.exe, which can be being caused
> by the Sasser worm infecting your system.
>
> <http://ask-leo.com/what_are_lsass_lsassexe_and_sasser_and_how_do_i_know_if_im_infected_what_do_i_do_if_i_am.html>
>
> <http://tiny.cc/hov0I>
>
> The second short url above has been generated from the longer on on the
> Tiny Url web site, and links to the Ask Leo article as well. I have
> included it just in case the long one doesn't wrap gracefully in this
> email, and winds up breaking.
>
> Here is a quote from a thread I was just reading, that explains that
> sometimes there will be a file which appears to be lsass.exe, but is
> actually named starting with a capital "i" instead of the default lower
> case "l" of the original file. This file named with an "i" is a trojan
> or virus file.
>> Lsass is the microsoft Local Security Authentication Server. IT is
>> used to run firewalls and other security features. ISASS is not LSASS.
>> Since the font used by task mgr makes Lowercase l and uppercase I the
>> same, you can't quite tell them apart. Isass is a type of gateway
>> worm, it first gets on your system, and disables your firewall, then
>> takes a hold of LSASS' computer responsabilities, and shuts down your
>> firewalls and other security features.
> Later, Ray Parrish
>> whenevery i start winxp i get this Isass.exe error message,this
>> application failed to initialize properly(0xc015000f)click "ok" to
>> terminate this application. after i click the ok i would get a black
>> screen,my desktop will not load,i have tried using the windows advance
>> option menu,every option that  i tried iwould get the same error and same
>> result.can someone please explain how i can get rid of this Isass.exe.
>>
>>              Do you want to signoff PCSOFT or just change to
>>                     Digest mode - visit our web site:
>>                    http://freepctech.com/pcsoft.shtml
>>
>>
>
> --
> Human reviewed index of links about the computer
> http://www.rayslinks.com
> Poetry from the mind of a Schizophrenic
> http://www.writingsoftheschizophrenic.com/
>
>              Do you want to signoff PCSOFT or just change to
>                     Digest mode - visit our web site:
>                    http://freepctech.com/pcsoft.shtml
>

        The NOSPIN Group has added a new feature on our website,
           web based bulletinboard for questions and answers:
              Visit our sister website at http://nospin.com